The AI Attack Surface Explained
AI is changing the way organizations build, ship, and interact with software. And with it comes a new security reality. As more teams adopt generative…
Author: Cybernoz
Hackers Can Exploit Motorola MR2600 Firmware Update Process to Gain Code Execution
A newly disclosed unauthenticated remote code execution vulnerability in Motorola MR2600 Wi-Fi routers allows attackers on the local network to upload and install a malicious…
Operation Capsule Vault Uses Malicious ISO Files and Process Injection to Deliver RokRAT
Operation Capsule Vault began with spear-phishing emails sent on June 22, 2026, posing as notices distributing materials from a legitimate academic event. The lures referenced…
A hardware security AI assistant that checks chips for hidden backdoors
Chip designers license blocks of circuitry from outside vendors and drop them into larger products. A single processor can carry components from a range of…
Hackers Use Fake Microsoft Entra Passkey Enrollment to Gain Microsoft 365 Access
Ravie LakshmananJul 10, 2026Enterprise Security / Authentication A threat actor has been targeting organizations spanning multiple sectors with voice-based fake security requests that prompt Microsoft…
Vocus positions for role in Meta’s Project Waterworth
Vocus is planning more undersea cable capacity to Australia’s north in a move that appears designed to position it for a role in Meta’s massive…
Database Ransomware: How It Works and How to Stop It
Intro In recent years, attackers have increasingly turned to “malware-less” Living-off-the-Land operations against cloud and SaaS environments. This trend has also extended to extortion and…
OpenAI temporarily relaxes GPT-5.6 Sol usage limits
OpenAI is temporarily relaxing GPT-5.6 Sol usage limits after demand for the company’s most powerful model surged over the past 48 hours. On Sunday, OpenAI…
Debian 13.6 security update patches over a hundred advisories in trixie
Most PCs still run with a UEFI Secure Boot certificate authority, installed by default since 2013, that has now expired. That certificate signed the bootloaders…
Study of 281 Free Android VPN Apps Finds Traffic Leaks, Unencrypted Data, and Tracking
Researchers ran 281 of the most popular free VPN apps on the Google Play Store through a new testing system and found that many fail…
Gov commits to digitised traveller arrivals form
The federal government will progressively phase in the use of a digitised incoming passenger form over the next 18 months, following a successful trial. The…
Ryuk Ransomware Member Pleads Guilty Over Attacks on U.S. Organizations
Ryuk Ransomware Member Pleads Guilty Over Attacks on U.S. Organizations Pierluigi Paganini July 12, 2026 An alleged Ryuk ransomware member pleaded guilty in the U.S.…